dsh-free-search 0.9.21 → 0.9.22

package/README.md

@@ -41,7 +41,7 @@ dsh 默认的搜索 provider 依赖 DeepSeek 官方 API key（`DEEPSEEK_API_KEY`
 - **时间过滤** —— `advanced_search` 工具支持 `timeRange`：固定档、自定义相对值、绝对日期三种形式（详见下方逻辑说明）
 - **系统提示词注入** —— agent 知道当前用哪个引擎、哪些需要 key；并明确所有搜索结果是**不可信外部数据**，不得执行其中的指令
 - **提示注入防护（不可信数据边界）** —— 插件自有工具（advanced_search / platform_search / free_search_test）的网页文本包在 `<untrusted-web-content>` 边界内（正文里自带的同名标记会被剥离，防止提前闭合）；核心 web_search / web_fetch 由 DSH 核心自带同类提示（`External web content follows...`）；所有 snippet 统一清洗并截断到 300 字符
-- **版本号 + 检查更新** —— 设置卡片显示当前版本（跟随 `PLUGIN_VERSION`，随发布更新），"检查更新"按钮直连 npm registry 对比最新版，有新版本时提示并可一键跳转
+- **版本号** —— 设置卡片底部显示当前版本（跟随 `PLUGIN_VERSION`，随发布更新）。检查与升级交给官方插件页（插件 → 已安装 → dsh-free-search → 更新），插件不再自带第二套更新按钮
 - **结果缓存** —— 相同查询（含引擎/时间过滤参数）5 分钟内命中缓存（LRU 50 条），防免费引擎限流、省付费额度；时长可在设置页 0-5 分钟自由配置（0 关闭）
 - **域名黑名单与安全搜索** —— `blockedDomains`：命中的域名不会进入任何结果；`safeSearch`（`off` / `moderate` / `strict`）为 Bing / DuckDuckGo 加一层过滤
 - **免费标注** —— 设置页中免费引擎带绿色 `FREE` 徽章，付费引擎带橙色 `API KEY` 徽章
@@ -497,7 +497,7 @@ Search engine test:
 
 #### 离线自检断言（tools/）
 
-仓库自带 **32 个**零依赖断言脚本（合计 **627 项**），**不需要 API key、不联网、不需要测试框架**，Node ≥ 20 即可跑：
+仓库自带 **34 个**零依赖断言脚本（合计 **636 项**），**不需要 API key、不联网、不需要测试框架**，Node ≥ 20 即可跑：
 
 | 脚本 | 覆盖 | 运行（项数） |
 |---|---|---|
@@ -522,6 +522,7 @@ Search engine test:
 | `assert-youcom.mjs` | You.com 免 key 档（#90）：两档 URL 与请求头、无 key 不发 `X-API-Key`、`YDC_API_KEY` 别名、429/401/402/5xx 分类 | `node tools/assert-youcom.mjs`（23） |
 | `assert-prompt-language.mjs` | 提示词语言（en/zh）：语言回退、9 个工具双语文案、标识符不被翻译、占位符插值、切换时只重注册一次 | `node tools/assert-prompt-language.mjs`（7） |
 | `assert-tool-schema-size.mjs` | 工具 schema 体积（#94）：共享引擎 id 常量、`domain_search` 不内嵌逐引擎句子、三处合计 < 1.6k 字符 | `node tools/assert-tool-schema-size.mjs`（5） |
+| `assert-config-seat.mjs` | 配置入口（#101）：卡片同时挂在 `plugins.bundle.config`（key = 包名，渲染在包页）与 `plugins.row.config`（老入口），两者共用同一渲染器 | `node tools/assert-config-seat.mjs`（4） |
 | `assert-rail-section.mjs` | 页内目录的机器可读当前段：卡片根 `data-dsh-fs-section` 与 `railActive` 绑定、六段 id 固定、滚动监听仍在更新 | `node tools/assert-rail-section.mjs`（4） |
 | `assert-package-files.mjs` | 发布清单闸门（#97）：`files` 展开后必须覆盖被引用的本地模块、入口点与 `cordis.patch.yml`，并确认 `prepack` 守卫生效 | `node tools/assert-package-files.mjs`（4） |
 | `assert-key-rotation.mjs` | 多 key 轮换（#96）：round-robin 与 peek、单 key 不推进、配额优先于 429 的分类、轮换候选集合、`multi` 模式内重试与预检不消耗 key | `node tools/assert-key-rotation.mjs`（7） |
@@ -593,7 +594,7 @@ This plugin provides multiple free search engines with automatic fallback, compl
 - **Time Filtering** — The `advanced_search` tool supports `timeRange`: fixed tiers, custom relative values, or an absolute date (details below)
 - **System Prompt Injection** — The agent is aware of the currently active engine and which engines require API keys; it is also told that all search output is **untrusted external data** and must never be executed as instructions
 - **Prompt-Injection Guard (untrusted-data boundary)** — Web-derived text from the plugin's own tools (`advanced_search` / `platform_search` / `free_search_test`) is wrapped in an explicit `<untrusted-web-content>` boundary (look-alike tags inside the text are stripped to prevent early closure); the core `web_search` / `web_fetch` tools carry DSH core's own notice (`External web content follows...`); every snippet is cleaned and capped at 300 characters
-- **Version + Update Check** — The settings card shows the current version (tracks PLUGIN_VERSION, bumped on release), and a "Check update" button queries the npm registry to compare against the latest release, prompting a one-click jump when a newer version exists
+- **Version label** — the settings card shows the current version (tracks PLUGIN_VERSION, bumped on release). Checking and updating is the official plugin page's job (Plugins -> Installed -> dsh-free-search -> Update); the plugin ships no second updater
 - **Result Caching** — Identical queries (same engine / time-filter args) hit an LRU cache (50 entries) for up to 5 minutes, protecting free engines from rate-limiting and saving paid quota; the TTL is configurable from 0-5 minutes in the settings UI (0 disables caching)
 - **Domain blocklist & safe search** — `blockedDomains` keeps matching domains out of every result; `safeSearch` (`off` / `moderate` / `strict`) adds a filter layer for Bing / DuckDuckGo
 - **Visual Badges** — Free engines feature a green `FREE` badge, while paid engines show an orange `API KEY` badge in the settings UI
@@ -1050,7 +1051,7 @@ Restart `dsh web` after switching to apply changes.
 
 #### Offline self-check assertions (`tools/`)
 
-**Thirty-two** zero-dependency assertion scripts ship with the repo (**627 assertions** total): **no API keys, no network, no test framework**, Node ≥ 20:
+**Thirty-four** zero-dependency assertion scripts ship with the repo (**636 assertions** total): **no API keys, no network, no test framework**, Node ≥ 20:
 
 | Script | Covers | Run (count) |
 |---|---|---|
@@ -1075,6 +1076,7 @@ Restart `dsh web` after switching to apply changes.
 | `assert-youcom.mjs` | You.com keyless tier (#90): both URLs and headers, no `X-API-Key` without a key, the `YDC_API_KEY` alias, and 429/401/402/5xx classification | `node tools/assert-youcom.mjs` (23) |
 | `assert-prompt-language.mjs` | Prompt language (en/zh): fallback rules, bilingual copy for all 9 tools, identifiers left untranslated, placeholder interpolation, and one re-registration per language change | `node tools/assert-prompt-language.mjs` (7) |
 | `assert-tool-schema-size.mjs` | Tool schema budget (#94): one shared engine-id constant, no per-engine sentences in `domain_search`, the three schemas under 1.6k chars combined | `node tools/assert-tool-schema-size.mjs` (5) |
+| `assert-config-seat.mjs` | Config entry point (#101): the card is registered on `plugins.bundle.config` (keyed by the package name, rendered on the bundle page) and on `plugins.row.config` (older entry), both sharing one renderer | `node tools/assert-config-seat.mjs` (4) |
 | `assert-rail-section.mjs` | Machine-readable active section for the in-page rail: the card root's `data-dsh-fs-section` tracks `railActive`, the six section ids are fixed, and the scroll spy still updates it | `node tools/assert-rail-section.mjs` (4) |
 | `assert-package-files.mjs` | Packaging gate (#97): after expanding `files`, every imported local module, the entry points and `cordis.patch.yml` must be published, and the `prepack` guard must be wired | `node tools/assert-package-files.mjs` (4) |
 | `assert-key-rotation.mjs` | Multi-key rotation (#96): round-robin and peek, single keys never advancing, quota classification ahead of 429, the rotation-candidate set, and in-engine retries that keep multi-mode preflight from consuming keys | `node tools/assert-key-rotation.mjs` (7) |

package/lib/client.js

@@ -123,9 +123,6 @@ window.__ModuleLoader__.load({
       ".dshfs-save:hover:not(:disabled){background:#0077ed;transform:translateY(-1px);box-shadow:0 2px 4px rgba(0,0,0,.15)}",
       ".dshfs-save:active:not(:disabled){transform:scale(0.98)}",
       "@media (prefers-color-scheme: dark){.dshfs-save{background:#0a84ff;color:#ffffff}.dshfs-save:hover:not(:disabled){background:#1e8eff}}",
-      ".dshfs-upgrade{border:1px solid rgba(52,199,89,.4);background:rgba(52,199,89,.15);color:#248a3d}",
-      "@media (prefers-color-scheme: dark){.dshfs-upgrade{color:#30d158}}",
-      ".dshfs-upgrade:hover:not(:disabled){background:rgba(52,199,89,.25)}",
       ".dshfs-badge{background:rgba(0,0,0,.05);color:#1d1d1f;white-space:nowrap;border-radius:999px;flex:none;padding:2px 8px;font-size:11px;font-weight:600;letter-spacing:0.3px}",
       "@media (prefers-color-scheme: dark){.dshfs-badge{background:rgba(255,255,255,.1);color:#f5f5f7}}",
       ".dshfs-badgeAuto{background:rgba(175,82,222,.15);color:#af52de;border:1px solid rgba(175,82,222,.2)}",
@@ -140,15 +137,7 @@ window.__ModuleLoader__.load({
       "@media (prefers-color-scheme: dark){.dshfs-langToggle{color:#a1a1a6}}",
       ".dshfs-update{color:#cc7a00;flex:none;font-size:12px;white-space:nowrap;border:1px solid rgba(255,149,0,.3);background:rgba(255,149,0,.12);border-radius:999px;padding:2px 8px}",
       "@media (prefers-color-scheme: dark){.dshfs-update{color:#ff9f0a}}",
-      ".dshfs-updateOk{color:#248a3d;flex:none;font-size:12px;white-space:nowrap;border:1px solid rgba(52,199,89,.3);background:rgba(52,199,89,.12);border-radius:999px;padding:2px 8px}",
-      "@media (prefers-color-scheme: dark){.dshfs-updateOk{color:#30d158}}",
       ".dshfs-updateLine{display:flex;align-items:center;gap:10px;flex-wrap:wrap}",
-      ".dshfs-updatePill{display:inline-flex;align-items:center;gap:6px;border:1px solid rgba(0,113,227,.2);background:rgba(0,113,227,.1);color:#0071e3;font:inherit;font-size:13px;font-weight:500;line-height:1;cursor:pointer;padding:6px 12px;border-radius:999px;text-decoration:none;white-space:nowrap;transition:all 180ms cubic-bezier(.4,0,.2,1)}",
-      "@media (prefers-color-scheme: dark){.dshfs-updatePill{color:#0a84ff;background:rgba(10,132,255,.15);border-color:rgba(10,132,255,.25)}}",
-      ".dshfs-updatePill:hover:not(:disabled){background:rgba(0,113,227,.15);border-color:rgba(0,113,227,.3)}",
-      "@media (prefers-color-scheme: dark){.dshfs-updatePill:hover:not(:disabled){background:rgba(10,132,255,.2);border-color:rgba(10,132,255,.4)}}",
-      ".dshfs-updatePill:disabled{opacity:.5;cursor:default}",
-      ".dshfs-updateIcon{flex:none;display:block}",
       ".dshfs-version{color:#6e6e73;font-size:12px;font-variant-numeric:tabular-nums;white-space:nowrap}",
       "@media (prefers-color-scheme: dark){.dshfs-version{color:#a1a1a6}}"
     ].join("");
@@ -255,18 +244,6 @@ window.__ModuleLoader__.load({
         testOk: (r) => `✓ ${r.count} 条结果（引擎: ${r.engine}）${r.content ? ` — ${r.content}` : ""}${r.sample ? ` · 例如 "${r.sample.slice(0, 40)}"` : ""}`,
         testFail: (e) => `✗ ${e}`,
         toggleLang: "EN",
-        checkUpdate: "检查更新",
-        checkingUpdate: "检查中…",
-        updateAvailable: (c, l) => `发现新版本 v${l}（当前 v${c}）`,
-        updateLatest: (c) => `已是最新版本 v${c}`,
-        updateCheckFailed: "检查更新失败（无法访问 npm registry）",
-        updateView: "查看 →",
-        hasUpdate: "有更新",
-        upgrade: "升级",
-        upgrading: "升级中…",
-        upgradeLinkMode: "（本地开发模式，升级请用 git pull）",
-        upgradeDone: (l) => `升级到 v${l} 完成，重启 dsh 后生效`,
-        upgradeFailed: (m) => `升级失败：${m}`,
         safeSearchLabel: "安全搜索过滤 (adlt)",
         safeSearchOff: "关闭 —— 引擎默认（不加参数）",
         safeSearchModerate: "中等 —— Bing 默认",
@@ -388,18 +365,6 @@ window.__ModuleLoader__.load({
         testOk: (r) => `✓ ${r.count} results (engine: ${r.engine})${r.content ? ` — ${r.content}` : ""}${r.sample ? ` · e.g. "${r.sample.slice(0, 40)}"` : ""}`,
         testFail: (e) => `✗ ${e}`,
         toggleLang: "中文",
-        checkUpdate: "Check update",
-        checkingUpdate: "Checking…",
-        updateAvailable: (c, l) => `New version v${l} available (current v${c})`,
-        updateLatest: (c) => `You're on the latest version v${c}`,
-        updateCheckFailed: "Update check failed (cannot reach npm registry)",
-        updateView: "View →",
-        hasUpdate: "Update available",
-        upgrade: "Upgrade",
-        upgrading: "Upgrading…",
-        upgradeLinkMode: "(local dev install - use git pull to update)",
-        upgradeDone: (l) => `Upgraded to v${l} - restart dsh to apply`,
-        upgradeFailed: (m) => `Upgrade failed: ${m}`,
         safeSearchLabel: "Safe search filter (adlt)",
         safeSearchOff: "Off - engine default (no filtering)",
         safeSearchModerate: "Moderate - Bing default",
@@ -437,7 +402,7 @@ window.__ModuleLoader__.load({
     };
     const tt = (lang) => I18N[String(lang ?? "").trim().toLowerCase() === "zh" ? "zh" : "en"];
     // 当前插件版本（与 lib/index.js 的 PLUGIN_VERSION 保持一致；跟随上游 v0.7.5）
-    const PLUGIN_VERSION = "0.9.21";
+    const PLUGIN_VERSION = "0.9.22";
     const PLUGIN_REPO_URL = "https://github.com/DDDMUC/dsh-free-search";
     // 右侧浮动目录（#85）：条目顺序即页面顺序，anchor 是页面里对应 field 的 id。
     const NAV_ITEMS = [
@@ -585,15 +550,6 @@ window.__ModuleLoader__.load({
       return response.json();
     }
 
-    async function bridgeCheckUpdate() {
-      const response = await fetch(`${BRIDGE_PREFIX}/check-update`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: "{}",
-      });
-      return response.json();
-    }
-
     async function bridgeCredentialsStatus() {
       const response = await fetch(`${BRIDGE_PREFIX}/credentials-status`, {
         method: "POST",
@@ -736,9 +692,6 @@ window.__ModuleLoader__.load({
       const [saveError, setSaveError] = react.useState("");
       const [testing, setTesting] = react.useState(false);
       const [testResult, setTestResult] = react.useState(null);
-      const [checkingUpdate, setCheckingUpdate] = react.useState(false);
-      const [upgrading, setUpgrading] = react.useState(false);
-      const [updateInfo, setUpdateInfo] = react.useState(null);
       // 回退优先级/池列表行内 key 输入：引擎 id → [当前值, setter]（zhihu 两引擎共享 ZHIHU_API_KEY）
       const KEY_INPUTS = {
         anysearch: [anysearchKey, setAnysearchKey],
@@ -1040,51 +993,6 @@ window.__ModuleLoader__.load({
         }
       };
 
-      const runCheckUpdate = async () => {
-        setCheckingUpdate(true);
-        setUpdateInfo(null);
-        setFailed(false);
-        setSaveError("");
-        try {
-          const result = await bridgeCheckUpdate();
-          if (result.ok) {
-            setUpdateInfo({ ok: true, ...result.value });
-          } else {
-            setUpdateInfo({ ok: false });
-          }
-        } catch {
-          setUpdateInfo({ ok: false });
-        } finally {
-          setCheckingUpdate(false);
-        }
-      };
-
-      const runUpdate = async () => {
-        setUpgrading(true);
-        setUpdateInfo(null);
-        setFailed(false);
-        setSaveError("");
-        try {
-          const response = await fetch(`${BRIDGE_PREFIX}/update`, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: "{}",
-          });
-          const result = await response.json();
-          if (result.ok) {
-            setUpdateInfo({ ok: true, hasUpdate: false, upgraded: true, message: result.value.message, latest: result.value.latest });
-          } else {
-            setUpdateInfo({ ok: false, upgradeFailed: result.message ?? "upgrade failed" });
-          }
-        } catch {
-          setUpdateInfo({ ok: false, upgradeFailed: "request failed" });
-        } finally {
-          setUpgrading(false);
-        }
-      };
-
-      // 浮动目录（#85）：放在卡片右侧的页面留白里，绝对定位不参与卡片布局，
-      // 所以正文宽度和 0.9.8 完全一致；留白不足（窄窗口/卡片贴边）时直接隐藏。
       react.useEffect(() => {
         if (!open) return undefined;
         const place = () => {
@@ -1374,6 +1282,7 @@ window.__ModuleLoader__.load({
                             react_jsx_runtime.jsx("button", {
                               type: "button",
                               className: "dshfs-railItem" + (railActive === item.id ? " dshfs-railItemActive" : ""),
+                              "data-dsh-fs-section": item.id,
                               onClick: () => goToSection(item.id),
                               children: [
                                 react_jsx_runtime.jsx("span", { className: "dshfs-railDot" }),
@@ -2024,86 +1933,7 @@ react_jsx_runtime.jsx("div", {
                         className: "dshfs-footerLeft",
                         children: [
                           react_jsx_runtime.jsx("span", { className: "dshfs-version", children: "v" + PLUGIN_VERSION }),
-                          updateInfo && updateInfo.ok && updateInfo.hasUpdate && !updateInfo.installable
-                            ? react_jsx_runtime.jsx("a", {
-                                className: "dshfs-updatePill",
-                                href: updateInfo.updateUrl,
-                                target: "_blank",
-                                rel: "noopener noreferrer",
-                                title: t.updateAvailable(updateInfo.current, updateInfo.latest),
-                                children: [
-                                  react_jsx_runtime.jsx("svg", {
-                                    className: "dshfs-updateIcon",
-                                    viewBox: "0 0 16 16",
-                                    width: 14,
-                                    height: 14,
-                                    "aria-hidden": "true",
-                                    children: react_jsx_runtime.jsx("path", {
-                                      d: "M8 2.2v6.4M5.2 6.4 8 9.2l2.8-2.8M3 10.8v1.4c0 .9.7 1.6 1.6 1.6h6.8c.9 0 1.6-.7 1.6-1.6v-1.4",
-                                      fill: "none",
-                                      stroke: "currentColor",
-                                      strokeWidth: 1.6,
-                                      strokeLinecap: "round",
-                                      strokeLinejoin: "round",
-                                    }),
-                                  }),
-                                  t.hasUpdate,
-                                ],
-                              })
-                            : react_jsx_runtime.jsx("button", {
-                                className: "dshfs-updatePill",
-                                type: "button",
-                                title: updateInfo && updateInfo.ok && updateInfo.hasUpdate ? t.updateAvailable(updateInfo.current, updateInfo.latest) : undefined,
-                                onClick: updateInfo && updateInfo.ok && updateInfo.hasUpdate ? runUpdate : runCheckUpdate,
-                                disabled: upgrading || checkingUpdate || saving || !ready,
-                                children: [
-                                  react_jsx_runtime.jsx("svg", {
-                                    className: "dshfs-updateIcon",
-                                    viewBox: "0 0 16 16",
-                                    width: 14,
-                                    height: 14,
-                                    "aria-hidden": "true",
-                                    children: react_jsx_runtime.jsx("path", {
-                                      d: "M8 2.2v6.4M5.2 6.4 8 9.2l2.8-2.8M3 10.8v1.4c0 .9.7 1.6 1.6 1.6h6.8c.9 0 1.6-.7 1.6-1.6v-1.4",
-                                      fill: "none",
-                                      stroke: "currentColor",
-                                      strokeWidth: 1.6,
-                                      strokeLinecap: "round",
-                                      strokeLinejoin: "round",
-                                    }),
-                                  }),
-                                  upgrading
-                                    ? t.upgrading
-                                    : checkingUpdate
-                                      ? t.checkingUpdate
-                                      : updateInfo && updateInfo.ok && updateInfo.hasUpdate
-                                        ? t.hasUpdate
-                                        : t.checkUpdate,
-                                ],
-                              }),
-                          updateInfo && updateInfo.ok
-                            ? updateInfo.upgraded
-                              ? react_jsx_runtime.jsx("span", {
-                                  className: "dshfs-updateOk",
-                                  children: t.upgradeDone(updateInfo.latest),
-                                })
-                              : updateInfo.hasUpdate
-                                ? updateInfo.installable
-                                  ? null
-                                  : react_jsx_runtime.jsx("span", {
-                                      className: "dshfs-version",
-                                      children: t.upgradeLinkMode,
-                                    })
-                                : react_jsx_runtime.jsx("span", {
-                                    className: "dshfs-updateOk",
-                                    children: t.updateLatest(updateInfo.current),
-                                  })
-                            : updateInfo && !updateInfo.ok
-                              ? react_jsx_runtime.jsx("span", {
-                                  className: "dshfs-failed",
-                                  children: updateInfo.upgradeFailed ? t.upgradeFailed(updateInfo.upgradeFailed) : t.updateCheckFailed,
-                                })
-                              : null,
+
                         ],
                       }),
                       react_jsx_runtime.jsx("div", {
@@ -2188,6 +2018,21 @@ react_jsx_runtime.jsx("div", {
       // description 必须传函数：ui-commands 读回的是 contribution.description()，
       // 传字符串会抛 TypeError: contribution.description is not a function；该异常
       // 会让整份 "/" 候选列表一起失败，菜单空白、其他命令也一起点不到。
+      // #101: also claim the bundle-level seat (keyed by the package name) so the
+      // card renders on the bundle page itself, between the description and the
+      // rows. The row-level seat stays registered for the older entry point.
+      ctx.slots.inject("plugins.bundle.config", () =>
+        ctx.slots.register(
+          {
+            name: "plugins.bundle.config",
+            key: "dsh-free-search",
+          },
+          (slotProps) =>
+            slotProps && slotProps.view === "summary"
+              ? summaryText()
+              : react_jsx_runtime.jsx(FreeSearchCard, { page: true })
+        )
+      );
       ctx.inject(["commandUi"], (sctx) => {
         const command = sctx.get("commandUi");
         sctx.effect(() => {

package/lib/index.js

@@ -4,7 +4,7 @@ import z from "@deepseek-ai/schemastery";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { exec, execFile } from "node:child_process";
+import { execFile } from "node:child_process";
 import { mcpCall, mcpContentText, parseMcpResponseText } from "./mcp_adapter.js";
 import { registerResearchTool } from "./research.js";
 import { registerDomainSearchTool } from "./vertical.js";
@@ -423,65 +423,7 @@ function routeEngines(query, { timeRange, disabledEngines = [], fallbackOrder =
   return [...ordered, ...remaining];
 }
 
-// 当前插件版本（发布时与 package.json 同步；跟随上游 v0.7.5，不在 PR 里 bump）
-const PLUGIN_VERSION = "0.9.21";
-// 检查更新的 npm registry 元数据地址（dsh-free-search 是 npmjs 上的公开包）
-const NPM_REGISTRY_URL = "https://registry.npmjs.org/dsh-free-search/latest";
-const PLUGIN_NPM_URL = "https://www.npmjs.com/package/dsh-free-search";
-const PLUGIN_REPO_URL = "https://github.com/DDDMUC/dsh-free-search";
 
-// 查询 npm registry 的最新版本；失败时返回 null（网络/代理问题不阻塞设置页）
-async function fetchLatestVersion(signal) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), 10000);
-  const onAbort = () => controller.abort();
-  signal?.addEventListener("abort", onAbort);
-  try {
-    const response = await fetch(NPM_REGISTRY_URL, {
-      headers: { accept: "application/json", "user-agent": "deepseek-harness/free-search" },
-      signal: controller.signal,
-    });
-    if (!response.ok) return null;
-    const data = await response.json();
-    return typeof data.version === "string" ? data.version : null;
-  } catch {
-    return null;
-  } finally {
-    clearTimeout(timer);
-    signal?.removeEventListener("abort", onAbort);
-  }
-}
-
-// 简单的 semver 比较（仅处理 x.y.z 主/次/补丁，忽略预发布标签）；a>b 返回 1, a<b 返回 -1, 相等返回 0
-function compareVersions(a, b) {
-  const na = String(a).split(".").map((n) => parseInt(n, 10) || 0);
-  const nb = String(b).split(".").map((n) => parseInt(n, 10) || 0);
-  for (let i = 0; i < 3; i++) {
-    if ((na[i] ?? 0) > (nb[i] ?? 0)) return 1;
-    if ((na[i] ?? 0) < (nb[i] ?? 0)) return -1;
-  }
-  return 0;
-}
-
-// 检测插件的安装模式：遍历 profiles/*/node_modules/dsh-free-search，
-// symlink（link: 本地开发）→ isLink=true；npm 真安装 → isLink=false；找不到 → null
-function detectInstallMode() {
-  const profilesDir = path.join(process.cwd(), "profiles");
-  let found = null;
-  try {
-    for (const name of fs.readdirSync(profilesDir)) {
-      const pkgPath = path.join(profilesDir, name, "node_modules", "dsh-free-search");
-      if (!fs.existsSync(pkgPath)) continue;
-      let isLink = false;
-      try {
-        isLink = fs.lstatSync(pkgPath).isSymbolicLink();
-      } catch {}
-      found = { profileDir: path.join(profilesDir, name), isLink };
-      break;
-    }
-  } catch {}
-  return found;
-}
 
 // time_range 支持：固定档 day/week/month/year，或自定义（相对 12h/3d/2mo/1y、绝对 YYYY-MM-DD）
 const TIME_RANGES = ["day", "week", "month", "year"];
@@ -3414,65 +3356,6 @@ function makeBridgeRoutes(settings, search, testEngine, getCredentials) {
       .map((descriptor) => String(descriptor.ns));
 
   const handlers = {
-    async checkUpdate() {
-      const latest = await fetchLatestVersion();
-      if (latest === null) {
-        return {
-          ok: false,
-          code: "update-check-failed",
-          message: "could not reach the npm registry (network/proxy) - check your connection",
-        };
-      }
-      const cmp = compareVersions(latest, PLUGIN_VERSION);
-      const mode = detectInstallMode();
-      return {
-        ok: true,
-        value: {
-          current: PLUGIN_VERSION,
-          latest,
-          hasUpdate: cmp > 0,
-          updateUrl: PLUGIN_NPM_URL,
-          repoUrl: PLUGIN_REPO_URL,
-          // 可一键升级：npm 真安装时 true；本地 link 开发模式 false（升级请 git pull 源码）
-          installable: mode !== null && !mode.isLink,
-          installMode: mode?.isLink ? "link" : mode !== null ? "registry" : "unknown",
-        },
-      };
-    },
-    // 一键升级：仅在 npm 真安装模式下执行 pnpm 升级；link 模式拒绝（避免破坏本地开发链路）
-    async updatePlugin() {
-      const mode = detectInstallMode();
-      if (mode === null) {
-        return { ok: false, code: "install-not-found", message: "could not locate dsh-free-search in any profile" };
-      }
-      if (mode.isLink) {
-        return {
-          ok: false,
-          code: "local-link-mode",
-          message: "local development install (symlink) - update the source repo instead (git pull), then restart dsh",
-        };
-      }
-      try {
-        const result = await new Promise((resolve, reject) => {
-          exec("pnpm add dsh-free-search@latest", { cwd: mode.profileDir, timeout: 120000 }, (error, stdout, stderr) => {
-            if (error) reject(new Error(`upgrade failed: ${(stderr || stdout || error.message).trim().slice(0, 300)}`));
-            else resolve(stdout);
-          });
-        });
-        const latest = await fetchLatestVersion();
-        return {
-          ok: true,
-          value: {
-            updated: true,
-            latest: latest ?? "unknown",
-            message: `upgraded to latest - restart dsh to apply`,
-            output: String(result).trim().slice(0, 200),
-          },
-        };
-      } catch (error) {
-        return { ok: false, code: "upgrade-failed", message: error instanceof Error ? error.message : String(error) };
-      }
-    },
     async rawSearch(request) {
       if (request === null || typeof request !== "object" || typeof request.query !== "string" || request.query.length === 0) {
         return { ok: false, code: "search-rejected", message: "malformed bridge search request (query is required)" };
@@ -3684,22 +3567,6 @@ function makeBridgeRoutes(settings, search, testEngine, getCredentials) {
         writeJson(res, 200, await handlers.credentialsUnset(body));
       },
     },
-    {
-      kind: "exact",
-      path: `${BRIDGE_PREFIX}/check-update`,
-      handler: async (req, res) => {
-        if (!guard(req, res)) return;
-        writeJson(res, 200, await handlers.checkUpdate());
-      },
-    },
-    {
-      kind: "exact",
-      path: `${BRIDGE_PREFIX}/update`,
-      handler: async (req, res) => {
-        if (!guard(req, res)) return;
-        writeJson(res, 200, await handlers.updatePlugin());
-      },
-    },
     {
       kind: "exact",
       path: `${BRIDGE_PREFIX}/raw-search`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-free-search",
-  "version": "0.9.21",
+  "version": "0.9.22",
   "description": "Free web search for DeepSeek Harness: 27 engines (Bing/DuckDuckGo/AnySearch/SearXNG/Exa/Tavily/Keenable/Firecrawl/Parallel/You.com keyless; Zhihu global/site via MCP and Perplexity/SerpBase/DeepSeek (official + native tools/search)/Baidu/Kimi/Aliyun/Doubao with key; OpenAI/Gemini/Claude model built-in search, explicit-only) + auto smart routing + global engine enable/disable & fallback priority + editable zh/en language pools + multi mode (parallel full language-pool merge) + multi_search cross-source tool + failure-aware fallback (quota/auth cooldown, transient retry, fallbackOn) + time filtering + platform search + domain blocklist (blockedDomains) + web_fetch, with web settings UI.",
   "type": "module",
   "main": "lib/index.js",